Global authentication service using a global user identifier

Patent metadata

Field	Value
Publication number	US-9529985-B2
Application number	US-201414278710-A
Country	US
Kind code	B2
Filing date	May 15, 2014
Priority date	May 15, 2014
Publication date	Dec 27, 2016
Grant date	Dec 27, 2016

Abstract

An authentication device may provide an authentication code to a third party device. The third party device may provide a third party service to which a client device has requested access. The authentication device may receive the authentication code from a mobile device that is different from the client device. The authentication device may determine a third party device identifier included in the authentication code. The third party device identifier may identify the third party device that provides the third party service. The authentication device may determine a transaction identifier included in the authentication code. The authentication device may selectively provide the transaction identifier to the third party device, identified by the third party device identifier, to cause the third party device to selectively permit the client device to access the third party service.

First claim

What is claimed is:

1. An authentication device, comprising:
a memory to store instructions; and
one or more processors to execute the instructions to:
receive a request for a Quick Response (QR) code,
the QR code being associated with a request, by a client device, to access a third party service;

generate the QR code;
provide the QR code to a third party device based on the client device requesting access to the third party service,
the third party device providing the third party service to which the client device has requested access, and
the third party device providing the QR code to the client device;

receive, from a mobile device, the QR code,
the mobile device being different from the client device, and
the mobile device and the client device being associated with a user;

determine a third party device identifier included in the QR code,
the third party device identifier identifying the third party device that provides the third party service;

determine a mobile device identifier that identifies the mobile device;
search a data structure of the authentication device to identify a global user identifier associated with the mobile device identifier,
the global user identifier being associated with a plurality of local user profiles of the user,
each local user profile, of the plurality of local user profiles of the user, being associated with a particular third party service of a plurality of third party services;

determine a transaction identifier included in the QR code; and
selectively provide the transaction identifier and the global user identifier to the third party device, identified by the third party device identifier, to cause the third party device to selectively permit the client device to access the third party service,
the global user identifier being used to identify a local user profile in the third party device,
the local user profile being used to access the third party service,
 the third party service being one of the plurality of third party services, and
the local user profile being one of the plurality of local user profiles of the user.

2. The authentication device of claim 1 , where the one or more processors are further to:
determine that the QR code, received from the mobile device, is valid; and
where the one or more processors, when selectively providing the transaction identifier to the third party device, are to:
provide the transaction identifier to the third party device based on determining that the QR code is valid.

3. The authentication device of claim 1 , where the one or more processors are further to:
determine that the QR code, received from the mobile device, is invalid; and
prevent the transaction identifier from being provided to the third party device based on determining that the QR code is invalid.

4. The authentication device of claim 1 , where the one or more processors are further to:
provide an instruction, to the third party device, to deny access to the third party service by the client device based on determining that the QR code is invalid.

5. The authentication device of claim 3 , where the one or more processors, when determining that the QR code is invalid, are to:
determine that the QR code is invalid based on at least one of:
determining that the QR code does not match a stored QR code;
determining that the QR code does not match a previously generated QR code;
determining that the QR code has not been provided to the third party device;
determining that a threshold amount of time has elapsed since the QR code was generated; or
determining that the QR code has been used in QR with a different request for the third party service or another third party service.

6. The authentication device of claim 1 , where the mobile device identifier is associated with a plurality of global user identifiers that include the global user identifier; and
where the one or more processors are further to:
receive information identifying the user; and
determine the global user identifier based on the information identifying the user.

7. The authentication device of claim 1 , where the one or more processors are further to:
determine that the global user identifier has been revoked; and
prevent the transaction identifier from being provided to the third party device based on determining that the global user identifier has been revoked.

8. The authentication device of claim 1 , where the global user identifier is associated with a plurality of mobile devices.

9. A non-transitory computer-readable medium storing instructions, the instructions comprising:
one or more instructions that, when executed by one or more processors, cause the one or more processors to:
receive a request for a Quick Response (QR) code,
the QR code being associated with a request, by a client device, to access a third party service;

generate the QR code;
provide, based on the client device requesting access to the third party service, the QR code to a third party device that provides the third party service to which the client device has requested access,
the third party device providing the QR code to the client device;

receive, from a mobile device, the QR code,
the mobile device being different from the client device, and
the mobile device and the client device being associated with a user;

determine a third party device identifier identified by the QR code,
the third party device identifier identifying the third party device that provides the third party service;

determine a mobile device identifier that identifies the mobile device;
search a data structure to identify a global user identifier associated with the mobile device identifier,
the global user identifier being associated with a plurality of local user profiles of the user,
each local user profile, of the plurality of local user profiles of the user, being associated with a particular third party service of a plurality of third party services;

determine a transaction identifier identified by the QR code;
provide the transaction identifier and the global user identifier to the third party device identified by the third party device identifier,
the global user identifier being used to identify a local user profile in the third party device,
the local user profile being used to access the third party service,
 the third party service being one of the plurality of third party services, and
the local user profile being one of the plurality of local user profiles of the user; and

cause the third party device to permit the client device to access the third party service based on providing the transaction identifier and the global user identifier to the third party device.

10. The non-transitory computer-readable medium of claim 9 , where the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:
provide, to the third party device, information to link the local user profile, associated with the third party service, to a plurality of global user identifiers that include the global user identifier.

11. The non-transitory computer-readable medium of claim 9 , where the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:
cause the third party device to determine a session identifier associated with the transaction identifier based on providing the transaction identifier to the third party device,
the session identifier identifying a communication session between the client device and the third party device; and

cause the third party device to identify the client device using the sess

Assignees

• Verizon Patent & Licensing Inc

Inventors

• Khalil Manah M
• Ramachandran Vidhyaprakash
• Vasu Vijay
• Dubagunta Saikumar
• Venkatachalam Sugandha
• Wise Jeffrey R
• Lamison Michael R

Classifications

• H04L63/0884

  by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/0815

  providing single-sign-on or federations · CPC title

• G06F21/31 Primary

  User authentication · CPC title

• H04L29/06

  Electricity · mapped topic